$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: XzpIeNfw/Er6+ajUZeIvpUKyoxMEu833I1gFwY8dGRs= Subject key identifier: C6:EB:A1:0B:05:5A:BC:8F:8A:CA:E6:23:10:C3:FA:E8:4A:35:B8:9A Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 116E08074FF938A92D453313F592F01EF20CF4E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:42:18 +0000 Manifest this update: Mon 21 Sep 2026 08:37:18 +0000 Manifest next update: Tue 22 Sep 2026 11:40:18 +0000 Files and hashes: 1: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: MWQ83fvw8C4O+y4wuT9E8Ws0ff/iU0p5Ulo/Dp4/WIw=) 2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6e:08:07:4f:f9:38:a9:2d:45:33:13:f5:92:f0:1e:f2:0c:f4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Sep 21 08:37:18 2026 GMT Not After : Sep 22 11:40:18 2026 GMT Subject: CN=C6EBA10B055ABC8F8ACAE62310C3FAE84A35B89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:4e:37:56:74:f9:8a:81:cd:ff:77:71:8f: a4:ec:4c:92:9e:4f:42:82:8f:ff:38:68:f9:af:5d: a9:4e:12:4e:84:8b:d6:13:b7:8e:6b:28:bc:04:b7: 3e:fc:3b:75:e3:97:d7:94:6c:2a:aa:ab:a3:1f:8d: 5d:f6:f8:5a:62:ce:d5:ea:c5:7d:ee:97:2b:96:f0: e9:88:cc:ca:7d:0e:7a:3e:4b:62:9d:b4:4b:f1:4e: 91:8c:bc:a0:b4:54:d2:8b:b8:9e:df:65:db:16:81: 0a:ab:53:b2:d8:fd:71:05:9e:49:40:ef:f9:02:6b: fa:c8:b3:98:85:5f:da:76:cf:09:cc:9c:a7:70:c5: fc:22:4c:29:34:96:d9:c2:c3:c0:77:31:56:7d:dd: 99:3d:1c:5c:73:ab:d8:29:3e:45:5e:fb:62:8b:3f: 41:b9:83:f2:c9:9b:13:29:63:02:79:08:ff:12:d1: 83:0a:dd:69:5a:1a:15:12:79:1a:05:79:45:8b:0c: e1:b3:b5:51:01:86:b4:5c:fb:e1:93:4c:75:10:3e: 9e:aa:b2:9b:3d:77:7a:66:18:6d:dc:db:3a:50:e3: a2:97:f1:5a:42:61:8f:95:0f:af:79:a3:cc:d4:c5: aa:1d:e9:3d:d1:71:c6:8e:11:5d:4a:ab:34:65:a5: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:A1:0B:05:5A:BC:8F:8A:CA:E6:23:10:C3:FA:E8:4A:35:B8:9A X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4d:b5:8b:60:d7:9b:a4:2d:23:0f:53:43:b1:97:83:0e:0f: f4:f5:34:f0:76:22:9a:a1:51:ce:99:dd:79:bf:27:78:ca:a0: 7f:c6:08:16:e7:68:b7:dc:b7:15:71:16:07:23:90:18:97:22: 28:49:e9:96:88:88:ef:d0:2f:44:77:53:d8:23:99:d0:3f:97: e6:40:cb:7d:6e:53:50:23:77:a7:51:17:d4:93:b3:f0:53:ba: 37:86:41:21:f9:d4:48:0e:70:36:1a:f4:31:1e:87:ae:1f:af: 99:e4:0a:74:90:b5:1a:0f:6d:65:b1:a1:78:f2:c6:1d:2c:79: 61:54:3d:e1:3a:c2:74:b2:ab:13:0a:ee:c3:c4:b8:4d:8e:64: b3:16:f1:8b:e1:0f:35:ef:cd:04:83:f2:7e:06:2a:bd:ad:24: ae:bf:c5:bd:56:8a:cb:a9:c7:66:66:3f:3a:62:a1:9e:75:a7: be:4d:51:d0:95:84:22:7d:32:c2:3c:ce:c1:b5:65:0b:d1:f0: c5:dd:59:3d:49:57:ce:9e:02:d2:05:9a:86:cb:b8:90:c7:1c: 05:f9:35:3c:26:91:86:d5:c3:3e:92:37:02:82:1a:a4:4a:26: c1:ab:42:2c:55:a1:b3:cf:f4:1d:d6:60:64:eb:70:bb:ec:11: 49:24:3c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEW4IB0/5OKktRTMT9ZLwHvIM9OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA5MjEwODM3MThaFw0yNjA5MjIxMTQwMThaMDMxMTAvBgNV BAMTKEM2RUJBMTBCMDU1QUJDOEY4QUNBRTYyMzEwQzNGQUU4NEEzNUI4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzn043VnT5ioHN/3dxj6TsTJKe T0KCj/84aPmvXalOEk6Ei9YTt45rKLwEtz78O3Xjl9eUbCqqq6MfjV32+FpiztXq xX3ulyuW8OmIzMp9Dno+S2KdtEvxTpGMvKC0VNKLuJ7fZdsWgQqrU7LY/XEFnklA 7/kCa/rIs5iFX9p2zwnMnKdwxfwiTCk0ltnCw8B3MVZ93Zk9HFxzq9gpPkVe+2KL P0G5g/LJmxMpYwJ5CP8S0YMK3WlaGhUSeRoFeUWLDOGztVEBhrRc++GTTHUQPp6q sps9d3pmGG3c2zpQ46KX8VpCYY+VD695o8zUxaod6T3RccaOEV1KqzRlpXuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuuhCwVavI+KyuYjEMP66Eo1uJowHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVNtYtg15ukLSMPU0Oxl4MOD/T1NPB2Ipqh Uc6Z3Xm/J3jKoH/GCBbnaLfctxVxFgcjkBiXIihJ6ZaIiO/QL0R3U9gjmdA/l+ZA y31uU1Ajd6dRF9STs/BTujeGQSH51EgOcDYa9DEeh64fr5nkCnSQtRoPbWWxoXjy xh0seWFUPeE6wnSyqxMK7sPEuE2OZLMW8YvhDzXvzQSD8n4GKr2tJK6/xb1Wisup x2ZmPzpioZ51p75NUdCVhCJ9MsI8zsG1ZQvR8MXdWT1JV86eAtIFmobLuJDHHAX5 NTwmkYbVwz6SNwKCGqRKJsGrQixVobPP9B3WYGTrcLvsEUkkPBo= -----END CERTIFICATE-----Generated at Mon Sep 21 14:07:15 2026 by rpki-client